CVE-2010-0572: Infoleak
First published: Fri Mar 05 2010(Updated: )
Cisco Digital Media Manager (DMM) before 5.2 allows remote authenticated users to discover Cisco Digital Media Player credentials via vectors related to reading a (1) error log or (2) stack trace, aka Bug ID CSCtc46050.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Digital Media Manager | =5.0.3 | |
| Cisco Digital Media Manager | =5.0.1 | |
| Cisco Digital Media Manager | =5.0 | |
| Cisco Digital Media Manager | =5.0.2 | |
| Cisco Digital Media Manager | <=5.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://securitytracker.com/id?1023671
- http://www.securityfocus.com/bid/38502
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1b923.shtml
- http://secunia.com/advisories/38800
- http://www.vupen.com/english/advisories/2010/0531
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56637
Frequently Asked Questions
What is the severity of CVE-2010-0572?
CVE-2010-0572 is classified as a high severity vulnerability due to the potential for credential exposure.
How do I fix CVE-2010-0572?
To fix CVE-2010-0572, upgrade Cisco Digital Media Manager to version 5.2 or later.
What systems are affected by CVE-2010-0572?
CVE-2010-0572 affects Cisco Digital Media Manager versions prior to 5.2, including 5.0, 5.0.1, 5.0.2, 5.0.3, and all versions up to 5.1.
What kind of exposure does CVE-2010-0572 allow?
CVE-2010-0572 allows remote authenticated users to discover credentials of Cisco Digital Media Player.
What should I do if my systems are running affected versions of Cisco Digital Media Manager?
If running affected versions of Cisco Digital Media Manager, immediately plan to upgrade to version 5.2 or later to mitigate risks from CVE-2010-0572.
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/remedy
- agent/weakness
- agent/author
- agent/severity
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- vendor/cisco
- canonical/cisco digital media manager
- version/cisco digital media manager/5.0.3
- version/cisco digital media manager/5.0.1
- version/cisco digital media manager/5.0
- version/cisco digital media manager/5.0.2
- version/cisco digital media manager/5.1